Hacker News new | ask | show | jobs
by pants2 772 days ago
AFAIK there's a new law requiring KYC for IaaS providers serving the US. I'm assuming it covers their butts as well regarding malicious activity, they don't want to host a DoS attack, CP site, or similar. You might be hard pressed to find a hosting provider in the US that doesn't ask for these things.
4 comments

It's only a recent proposal in the US, not law, if you're talking about what I think you are:

https://torrentfreak.com/u-s-know-your-customer-proposal-wil...

>>> Late January, the U.S. Department of Commerce published a notice of proposed rulemaking for establishing new requirements for Infrastructure as a Service providers (IaaS) . The proposal boils down to a 'Know Your Customer' regime for companies operating cloud services...

This is probably what you're thinking of [0]. The comments period is closed, but as far as I know it hasn't actually become a rule yet, and regardless:

* The rule would only apply to people living outside the US, so if you pay with a credit card with a billing address in the US from an IP in the US they probably wouldn't need to KYC you.

* KYC != "send me a photo of you holding your driver's license". I can open a bank account by just typing in my name, address, birthday, and SSN. That's enough KYC for a bank, it would be more than enough for a hosting provider even if that proposed rule became law.

What this company is asking for is beyond the pale even by full finance KYC standards. The most likely explanation is that an automated fraud detection system got set off and OP was selected for a much more rigorous review than they typically do.

[0] https://news.ycombinator.com/item?id=40158752

That is what I'm thinking of, thanks for the context
I’ve never seen this, maybe Im missing context? Amazon/Google/etc don’t require pictures of ID and CC?
agreed, I don't recall any large cloud or VPS provider asking for an ID.. maybe a French thing?
Source? OVH has had this for years.